AI Agents Target Gaming Accounts and Apple Certificates
Original title: Hackers Put AI Agents on Autopilot to Steal Gaming Accounts and Apple Signing Certificates
ARTEX agents stole 190000 Honor of Kings credentials and 300 signing certificates from gray-market shops.
ARTEX AI agents targeted gaming credential dumps and Apple signing shops. Operators ran agents via prompts on Chinese models like DeepSeek v4.1 Flash. Agents used basic web flaws to access databases and collect certificates which they validated for iOS sideload.
Unconfirmed: Exact identities of operators and ARTEX developers remain unconfirmed.
- Ten misconfigured ARTEX panels exposed databases.
- Agents recovered over 190000 Honor of Kings accounts.
- Three signing certificates passed validation checks.
- Campaigns ran for five days on DeepSeek models.
- Most ARTEX servers located in the US and Hong Kong.
Impact: stolen gaming accounts and Apple signing certificates
- 1.remove hardcoded credentials from frontend bundles
- 2.enforce API authentication on all services
- 3.restrict S3 write permissions
From the original article
3 min read at gbhackers.com
ARTEX, a Chinese open-source agentic penetration-testing platform, to run autonomous attacks. The operators set a goal and then mostly check progress. Researchers identified 2,557 systems that host or hosted ARTEX panels, and 1,608 were live and public.
By Mayura Kathir · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.